| # Based on CentOS7 fork of @smartmadsoft: https://gist.github.com/moneytoo/ab3f34e4fddc2110675952f8280f49c5 | |
| # "6" for CentOS6 or Amazon Linux, "7" for CentOS7 | |
| CENTVER="6" | |
| OPENSSL="openssl-1.0.2h" | |
| NGINX="nginx-1.10.1-1" | |
| http://nginx.org/packages/centos/6/SRPMS/nginx-1.10.1-1.el6.ngx.src.rpm |
| Vagrant.require_version ">= 1.7.0" | |
| Vagrant.configure(2) do |config| | |
| config.vm.provider :virtualbox do |vb| | |
| vb.gui = false | |
| vb.customize [ 'modifyvm', :id, '--memory', '512' ] | |
| vb.customize [ 'modifyvm', :id, '--nictype1', 'virtio' ] | |
| vb.customize [ 'modifyvm', :id, '--natdnshostresolver1', 'on' ] | |
| vb.customize [ 'modifyvm', :id, '--natdnsproxy1', 'on' ] |
Set resolver for nginx, you probably already have one if you use SSL OCSP stapling 8.8.8.8 are Google's public IPv4 DNS servers.
resolver 8.8.8.8 valid=86400;
resolver_timeout 10;
Place this configuration on your server_block or create some .conf file on /etc/nginx and use include to call it, like you would with global SSL configuration.
| # Nginx SSL configuration used on butters.xcloud.com.ar to get a A+ on Qualys SSL Labs tests | |
| # (https://www.ssllabs.com/ssltest/analyze.html) | |
| # Check this gist for updates (https://gist.github.com/hgranillo/da7eef5045f57e5b4cd9c03bcfd44cbf) | |
| # Path to certificate and private key. | |
| # The .crt may omit the root CA cert, if it's a standard CA that ships with clients. | |
| # You may want to configure this on your virtualhosts server block. | |
| #ssl_certificate /path/to/unified.crt; | |
| #ssl_certificate_key /path/to/my-private-decrypted.key; |
| yum install -y iptables-services | |
| sudo systemctl stop firewalld && sudo systemctl start iptables; | |
| sudo systemctl mask firewalld | |
| sudo systemctl enable iptables | |
| sudo systemctl restart iptables |